From e1c27f4feb4dad776fff27c41c321b6664687cf9 Mon Sep 17 00:00:00 2001 From: soh_cah_toa Date: Mon, 28 Apr 2014 20:34:56 -0400 Subject: [PATCH] Removed support for TXT resource record. Like the HINFO and MINFO RR's, TXT is vulnerable to RCE attacks and has no purpose at the moment. TXT may be needed in the future (e.g. data exfiltration) which is why it has been removed separately. --- extensions/dns/model.rb | 8 -------- 1 file changed, 8 deletions(-) diff --git a/extensions/dns/model.rb b/extensions/dns/model.rb index 210914fde..8a7220564 100644 --- a/extensions/dns/model.rb +++ b/extensions/dns/model.rb @@ -167,14 +167,6 @@ module BeEF else raise InvalidDnsResponseError, 'SOA' end - elsif resource == Resolv::DNS::Resource::IN::TXT - if resource.is_a?(String) - sprintf "t.respond!('%s')", response - elsif (response.is_a?(Symbol) && response.to_s =~ sym_regex) || response =~ sym_regex - sprintf "t.fail!(:%s)", response.to_sym - else - raise InvalidDnsResponseError, 'TXT' - end elsif resource == Resolv::DNS::Resource::IN::WKS if response.is_a?(Array) unless BeEF::Filters.is_valid_ip?(resource[0]) &&